From ff931e1708b128bfc8d06ef9dcf4bed25e792c76 Mon Sep 17 00:00:00 2001 From: emelinda Date: Sat, 7 Nov 2026 18:07:36 +0300 Subject: [PATCH] security-audit: audit-processor flush_interval 5m -> 1m Deliver audit events to MinIO within a minute for near-real-time investigation; trade-off is more small parquet files (compaction is planned in stage 3 of k8s-audit). --- infrastructure/security-audit/base/processor-configmap.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/infrastructure/security-audit/base/processor-configmap.yaml b/infrastructure/security-audit/base/processor-configmap.yaml index d9c4ed3..92be3c6 100644 --- a/infrastructure/security-audit/base/processor-configmap.yaml +++ b/infrastructure/security-audit/base/processor-configmap.yaml @@ -50,7 +50,7 @@ data: port: 8000 # /healthz, /readyz, /metrics stream: - flush_interval: 5m - flush_max_rows: 10000 + flush_interval: 1m # как часто сбрасывать буфер в MinIO (и коммитить offset'ы) + flush_max_rows: 10000 # или раньше, при стольких строках flush_timeout: 30s # меньше kafka.rebalance_timeout max_flush_failures: 30